Questa pagina è disponibile in italiano · Leggila in italiano →
Choose your tool
Three tools, one chain of custody: acquisition, verification and analysis of digital evidence, in records anyone can re-check.
The three programs
Windows and macOS
Captures web pages and social media, email, WhatsApp and Telegram chats, files, FTP and cloud as evidence, and records the screen. Each capture becomes a signed record with a qualified eIDAS timestamp included.
2 free slots when you confirm your email · then €6 to €3 per slot: 1 slot for files, images and screen, 2 for web, email, chats, FTP and cloud · Prices
iPhone and Android
Photos, video and audio sealed the moment they are taken, with verifiable time, location and hashes. The content stays on your phone: only the verification data goes to the server.
2 free slots when you confirm your email · photo and audio 1 slot, video 2 · Prices
Windows and macOS
Examines the files you already have: integrity and hashes, PDFs (compare, OCR, analysis), images (metadata, C2PA and signs of editing), email, PEC and phishing, digital signatures and timestamps, archives and disk images. It runs on your computer: the files stay there.
10-day free trial · then €49 a year, all modules, up to 5 devices · Prices
How they work together
C.E.R.T.O. for what is online, LOCUS for what is in front of you. One account for all three programs, and one slot balance for C.E.R.T.O. and LOCUS.
Every record is born with hashes, the program’s signature (Ed25519) and timestamps, including a qualified eIDAS timestamp from InfoCert, in the open BagIt format.
Probatio opens and verifies C.E.R.T.O. and LOCUS records. It is not required: anyone can re-check them without our software.
Why you can trust it
A record contains the captured files, their hashes (SHA-256 and others), the program’s signature and the timestamps. Hashes can be recomputed with any hashing tool, signature and timestamps with OpenSSL: none of our software is needed.
ISO/IEC 27037BagIt · RFC 8493RFC 3161eIDAS · InfoCertCASE/UCO
See a real capture, file by file → Look up a capture by code or hash →
Who it is for
Chats, emails and web pages to file in court with C.E.R.T.O.; photos and video from the client or the site with LOCUS; files, PDFs and PECs received, examined with Probatio.
C.E.R.T.O. · LOCUS · Probatio
Damage photographed with a time, place and hashes that anyone can re-check.
Leaks, faults and common areas documented in a verifiable series.
Verifiable photos, video and audio, while the content stays on the phone.
Check files, signatures, PDFs, images and emails received for an expert report.
FAQ
It depends on where the data is: online (web pages, email, chats) → C.E.R.T.O.; to photograph or record on site → LOCUS; a file you already have to examine or verify → Probatio.
Yes: one account for all three programs. C.E.R.T.O. and LOCUS also share the same slot balance; Probatio runs on a yearly licence on the same account.
No subscription for C.E.R.T.O. and LOCUS: you buy slots, from €6 to €3, that never expire, and get 2 free when you confirm your email. Probatio: 10 days free, then €49 a year.
Yes, that is the point: hashes, signature and timestamps can be re-checked with standard tools, without our software.
C.E.R.T.O. keeps the transmitted record on the server for 5 years, except Deep Web captures (the content is never kept) and packages over 500 MB, which stay only on your computer. LOCUS: photos, video and audio stay on the phone, only the verification data goes to the server. Probatio works on your computer; for a timestamp it sends only the hash.
Yes: all three programs are in Italian and English and the qualified timestamp follows the EU eIDAS regulation. How evidence is assessed depends on each country’s law.
Tell us in a couple of lines what you need to capture or verify: we will tell you which program to use and how.
From our sites
From the three sites in turn: the latest from C.E.R.T.O., Probatio and LOCUS.
After an incident it is easy to rush the photos and miss things. Four shots, the right order and a way to make the photos verifiable before the loss adjuster arrives.
Read →
Two versions of the same document may look identical, yet a single letter, number or pair of swapped words can change the meaning. Learn how to spot the changes with PDF comparison and two pairs of sample files.
Read →A recording made on the computer can be used as evidence, but on its own says little about integrity, provenance and timing. How to make it verifiable, and when recording is lawful.
Read →
The location stored in a photo says far less than people think. What accuracy means, where the data lives and what a seal cannot guarantee.
Read →Forensic acquisition products differ in how they acquire, what they deliver and what they cost. Ten questions to ask before choosing, and a comparison of what vendors declare.
Read →An indicator is a fact you can check again in the file or in the DNS, or it is not there. Server route, SPF, DKIM, DMARC, links and attachments, without judging the wording.
Read →Page 1 of 5 · 49 articles
About me
I am a developer: I have been programming since 2001 and building AcquisizioniForensi since hashbot.it was discontinued. C.E.R.T.O., LOCUS, Probatio and the free tools on acquisizioniforensi.it are written from scratch, without off-the-shelf platforms. I also work as a party-appointed technical expert.